nRF5340 Netcore firmware update using external flash

[djgj]

I am using NCS 1.7.0 and latest nRF5340 DK

I am trying to update netcore firmware using the process defined here: 
https://developer.nordicsemi.com/nRF_Connect_SDK/doc/1.7.0/nrf/ug_nrf5340.html#fota-upgrades

I am able to update the appcore and netcore using the smp_svr sample as documented  here: https://developer.nordicsemi.com/nRF_Connect_SDK/doc/1.7.0/zephyr/samples/subsys/mgmt/mcumgr/smp_svr/README.html#smp-svr-sample

I used west tool for building the smp_svr sample

`west build -b nrf5340dk_nrf5340_cpuapp -- -DCONFIG_BOOTLOADER_MCUBOOT=y -Dmcuboot_CONFIG_PCD=y -DOVERLAY_CONFIG=overlay-bt.conf`

I also enabled logging in hci_rpmsg and modified some dummy logging message to confirm that update has happened successfully in the netcore

This sample does not use QSPI external flash for the FOTA so i modified the sample to use external flash by adding an overlay and also CONFIG_NORDIC_QSPI_NOR=y.

This modified sample works for the updating application core but does not work for network core. I am able to upload the network core binary but once i issue image test and reset commands it takes sometime to reboot but still network core has the old firmware. 

I had to use the following configs in mcuboot child image configurations to come to this state:

```

CONFIG_PCD=y

CONFIG_PCD_APP=y

CONFIG_PCD_NET=y

# # CONFIG_UPDATEABLE_IMAGE_NUMBER=2

# # CONFIG_FLASH_SIMULATOR=y

# # CONFIG_FLASH_SIMULATOR_DOUBLE_WRITES=y

# # CONFIG_FLASH_SIMULATOR_STATS=n

# # CONFIG_BOOT_UPGRADE_ONLY=y

CONFIG_BOOT_SWAP_USING_SCRATCH=y

CONFIG_NORDIC_QSPI_NOR=y

CONFIG_NORDIC_QSPI_NOR_STACK_WRITE_BUFFER_SIZE=16

```

if i use the commented options above then during FOTA process device reboots continuously with a fatal error seen on network core.

I was facing a similar issue on my nRF5340 based product development (where i wanted to use CONFIG_BOOT_SWAP_USING_SCRATCH) and hence i thought it will work in devkit but i see the same issue here too on smp_svr sample application.

Kindly help me with this as I don't know what else is missing from my configurations that will enable me to update the network core using external flash QSPI.

Regards,

Dhananjay

[Edvin]

Hello,

I am terribly sorry for the late reply. I have spent a lot of time lately trying to wrap my head around the MCUboot, and I am sorry for the delay it has caused for you. I will strive to answer more promptly from now on.

I tried to replicate this using NCS v1.9.1 today, but I couldn't reproduce the issue. I know that a lot happened on the DFU part from NCS v1.7.0. Is it possible for you to see if the issue is replicable using e.g. the smp_svr sample from NCS v1.9.1? Or from your own custom application in v1.9.1, if that is easier for you.

If the issue persists, does it only happen when you are using QSPI, and does it only happen when you try to update the network core, and not the application core?

Best regards,

Edvin

[djgj]

Hello Edvin,
             Thanks for the reply.
I was able to update netcore also using QSPI. But i had to use this option only "CONFIG_BOOT_UPGRADE_ONLY". 
I followed the example of peripheral_uart with Thingy53 board. With this i was able to put the secondary slots of appcore and netcore to external QSPI Flash. One more Important thing is to have flash simulator in appcore RAM which acts as primary slot for netcore.

I see that "CONFIG_BOOT_SWAP_USING_SCRATCH" is not supported since we cannot do image reversion on netcore.
Is this only relevant for "simulataneous multi image DFU" process or for doing FOTA one by one also?
https://developer.nordicsemi.com/nRF_Connect_SDK/doc/1.7.0/nrf/ug_nrf5340.html#fota-upgrades

Thanks,

DJ

[Edvin]

Hello DJ,

djgj said:

I see that "CONFIG_BOOT_SWAP_USING_SCRATCH" is not supported since we cannot do image reversion on netcore.

That may be true, but from what do you draw that conclusion?

I don't know enough about this subject at this point in time, so if you can point me to how you found that out, I can check with the developers whether it is correct or not. 

BR,

Edvin

[djgj]

Hello Edvin,
        May be i phrased it wrongly. But for me "CONFIG_BOOT_SWAP_USING_SCRATCH" did not work and when i checked in Zephyr's discord channel with Nordic Vendor thread they mentioned i need to use "CONFIG_BOOT_UPGRADE_ONLY" for updating netcore. 

Also this is mentioned as part of the Nordic document: developer.nordicsemi.com/.../ug_nrf5340.html

May be i am interpreting something wrong. But i would like some confirmation from Nordic, whether we can use "CONFIG_BOOT_SWAP_USING_SCRATCH" option for updating netcore and QSPI flash?

Thanks,

Dhananjay G J

[Edvin]

According to our SDK team, the reason we recommend CONFIG_BOOT_UPGRADE_ONLY when using an external flash chip is because if you have the opportunity to swap back to the previous FW, then the FW in the swap slot will be unencrypted on the external flash, and it is fairly easy to read it out either by tampering with the external flash chip, or by monitoring the QSPI bus.

The reason CONFIG_BOOT_UPGRADE_ONLY changes the behavior is that the new image will be encrypted, and it will not store the old (unencrypted) image on the external flash, and it is not possible to swap back (which would then expose the unencrypted new image in the QSPI flash).

Best regards,

Edvin